CVE-2013-1752

** REJECT ** Various versions of Python do not properly restrict readline calls, which allows remote attackers to cause a denial of service (memory consumption) via a long string, related to (1) httplib - fixed in 2.7.4, 2.6.9, and 3.3.3; (2) ftplib - fixed in 2.7.6, 2.6.9, 3.3.3; (3) imaplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; (4) nntplib - fixed in 2.7.6, 2.6.9, 3.3.3; (5) poplib - not yet fixed in 2.7.x, fixed in 2.6.9, 3.3.3; and (6) smtplib - not yet fixed in 2.7.x, fixed in 2.6.9, not yet fixed in 3.3.x. NOTE: this was REJECTed because it is incompatible with CNT1 "Independently Fixable" in the CVE Counting Decisions.

Status

Show unmaintained releases

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
python2.7	Upstream: http://hg.python.org/cpython/rev/8a22a2804a66 Upstream: http://hg.python.org/cpython/rev/5e310c6a8520 Upstream: http://hg.python.org/cpython/rev/44ac81e6d584 Upstream: http://hg.python.org/cpython/rev/44ac81e6d584 Upstream: http://hg.python.org/cpython/rev/dd906f4ab923 Upstream: http://hg.python.org/cpython/rev/d7ae948d9eee Upstream: http://hg.python.org/cpython/rev/36680a7c0e22 Upstream: http://hg.python.org/cpython/rev/339f877cca11 Upstream: http://hg.python.org/cpython/rev/923aac88a3cc
python3.2	Upstream: https://hg.python.org/cpython/rev/deee87d61436 Upstream: https://hg.python.org/cpython/rev/783e7b4375ac Upstream: https://hg.python.org/cpython/rev/5d1c03316af7 Upstream: https://hg.python.org/cpython/rev/985bda4edf9d Upstream: https://hg.python.org/cpython/rev/76be07730f8d Upstream: https://hg.python.org/cpython/rev/0f362676460d
python3.4	Upstream: http://hg.python.org/cpython/rev/e445d02e5306 Upstream: http://hg.python.org/cpython/rev/38db4d0726bd Upstream: http://hg.python.org/cpython/rev/4b0364fc5711 Upstream: http://hg.python.org/cpython/rev/fc88bd80d925 Upstream: http://hg.python.org/cpython/rev/68029048c9c6 Upstream: http://hg.python.org/cpython/rev/d62a67318023

References

Related Ubuntu Security Notices (USN)

USN-2653-1
Python vulnerabilities
25 June 2015

Status

Patch details

References

Related Ubuntu Security Notices (USN)

Other references